This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft
File: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft (raw, json)
Hash identifier: SW0ypbQfEgLTFAje45ZwFa/yeFNK9Jt3f+czUaI9Cbc=
Subject key identifier: 44:44:B2:33:A8:84:B1:8F:A7:DF:E6:54:53:7E:B1:9A:C3:A3:07:BA
Authority key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D
Certificate issuer: /CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D
Certificate serial: 6F94F572D388912404609121ED5285317DFE7360
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft
Manifest number: 0522
Signing time: Sun 25 Jan 2026 11:50:52 +0000
Manifest this update: Sun 25 Jan 2026 11:45:52 +0000
Manifest next update: Wed 28 Jan 2026 20:02:52 +0000
Files and hashes: 1: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl (hash: zRwHYUuroQcx8qCfZzx1FFI/qtxBzSqCdx4bMK7K+CI=)
2: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: Q46pxbm+TVjkz99t2lUyFhkKtMbUjt5MtTd3GxK/1m0=)
3: 3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa (hash: XIQ/lQWer2x/1W1XBHKNLMW19qN6bWGcY/8CJlO5tmY=)
4: 3130332e3134372e3235342e302f32342d3234203d3e20313334363534.roa (hash: SREiQzAjfVMpOJnEfnQMUDFShy+UOiOi5qWZd3X3Wts=)
5: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: 1oSAlGyCAQ5BsCDikGrzZ8Xay1TMu0rXb0E3UWwkSO0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl
rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:94:f5:72:d3:88:91:24:04:60:91:21:ed:52:85:31:7d:fe:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D
Validity
Not Before: Jan 25 11:45:52 2026 GMT
Not After : Jan 28 20:02:52 2026 GMT
Subject: CN=4444B233A884B18FA7DFE654537EB19AC3A307BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:5a:9b:26:00:db:2c:d9:9b:6d:a8:56:03:
73:3b:6c:03:39:64:cf:37:fa:75:71:4d:49:0c:c3:
2d:48:8c:1f:f7:06:94:48:2c:30:e3:4c:b3:cf:c9:
b5:f0:c7:1b:b2:ba:c1:49:a2:5b:5e:ca:2b:3b:7e:
93:91:69:a2:db:0d:d3:b2:7c:82:0a:24:fc:8e:18:
c8:80:00:01:8d:1f:ab:23:a2:32:a5:6c:33:fb:77:
db:de:87:a2:9d:2e:82:fc:1b:08:d8:35:4c:76:b8:
12:db:11:a2:a5:07:19:48:af:d0:aa:3f:f6:bf:66:
fa:44:55:24:f6:71:13:eb:85:b7:56:01:ef:4e:36:
88:70:c9:a1:a0:13:a7:4f:52:0b:44:12:ea:9b:1a:
5c:3a:fc:f8:42:f8:86:01:bc:df:6a:ec:f6:9b:c9:
39:f6:7d:5a:7e:15:4a:c2:51:05:37:88:47:d1:27:
08:56:34:be:a5:6e:b2:85:44:85:3e:ab:b1:b6:48:
59:f1:15:00:ac:4a:8c:44:10:54:fe:4f:3c:6c:fc:
5c:cc:73:54:b9:5a:11:66:61:be:d3:b6:c7:87:5b:
16:34:90:34:03:28:f2:57:65:0b:d5:93:9e:0b:e3:
17:c2:e5:1d:9f:82:f8:9d:62:7e:da:32:c2:7f:1c:
9c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:44:B2:33:A8:84:B1:8F:A7:DF:E6:54:53:7E:B1:9A:C3:A3:07:BA
X509v3 Authority Key Identifier:
keyid:A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9e:50:c9:f1:69:b9:39:1a:7d:03:00:10:6c:8b:2d:17:16:
1f:a4:cf:65:d3:f2:13:ae:ce:b5:20:6d:ff:ea:df:30:1c:d9:
c0:e4:87:8e:11:80:92:d4:2b:aa:59:11:79:c6:6c:73:77:a3:
e9:00:ee:bd:74:b3:b5:23:16:7c:bb:10:44:4f:ca:40:cb:7e:
97:2a:ab:91:5a:df:55:66:a5:55:02:76:9a:23:91:ca:c0:df:
e5:8a:eb:44:e9:1f:2e:65:6d:a3:aa:37:69:90:77:ad:59:8d:
63:f0:e4:8b:90:68:63:0a:ea:82:67:70:c5:2a:68:be:10:6d:
f4:18:b3:2c:78:83:1e:52:9e:89:b0:15:13:90:c2:15:11:dd:
30:aa:ba:20:ac:f0:8d:e3:4c:e0:03:86:6d:e1:51:70:13:8d:
3d:ff:f2:8b:0c:be:af:65:c3:70:07:f0:52:2b:f4:c3:c3:78:
80:9c:d3:e2:69:dc:34:f2:25:87:a2:b4:62:f7:bc:5b:5c:35:
62:c9:99:fe:03:75:aa:45:7a:72:0f:bc:c4:bc:5b:a6:ae:03:
9e:3b:b0:b5:d3:8e:bb:a4:2f:e0:33:7f:43:6e:60:44:59:aa:
00:5b:ce:3a:6d:5c:d7:86:f6:6d:e4:d2:eb:41:e2:31:f2:16:
30:8f:77:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:13 2026 by rpki-client